The HUSKY – Products Filter Professional for WooCommerce plugin WordPress is vulnerable to blind SQL Injection via the `phrase` parameter in all versions up to, and including, 1.3.7.1 due insufficient escaping on user supplied lack of sufficient preparation existing query. This makes it possible unauthenticated attackers append additional queries into already that can be used extract sensitive information from database.